PRIVACY POLICY
Last updated: 2026-01-22
This Privacy Policy sets out the terms and conditions under which Kinga Machowska (operating the brand “The End of the Sun Forge”), with its registered address at Bogoniowice 100, 33-190 Ciężkowice, Poland (“we”, “us”), may collect and process information, including personal data, relating to users (“User” or “Users”) of the website (https://www.endofsun.com) and related services.
1. Who is the Controller?
The controller of your personal data is:
Kinga Machowska
Address: Bogoniowice 100, 33-190 Ciężkowice, Poland
Email: endofthesungame@gmail.com
Website: https://www.endofsun.com
TAX ID: PL8733059677
2. What does this Privacy Policy cover?
This Privacy Policy applies to personal data processed when you:
- browse the Website,
- contact us via the contact form or email,
- subscribe to our newsletter (if available),
- interact with third-party features on the Website (e.g., embedded videos),
- manage cookie consent choices via our cookie banner/settings.
3. What personal data do we process?
Depending on how you use the Website, we may process:
A) Contact and communication
Email address, name (if provided), message content, and any information you choose to include.
B) Newsletter (if available)
Email address (and name if provided), subscription status, and technical information necessary to deliver emails and process unsubscribes.
C) Technical data and security
IP address, device/browser information, timestamps, and server/security logs (to operate and protect the Website and prevent abuse).
D) Cookies and similar technologies
Information stored on your device via cookies/identifiers (see Section 9 and our Cookies Policy for details).
4. Why do we process your data (purposes)?
We process personal data for the following purposes:
- to respond to inquiries and communicate with you,
- to provide the newsletter and send updates if you subscribe,
- to operate, secure, and maintain the Website, including troubleshooting and protecting against abuse,
- to prevent spam and automated abuse (e.g., by using anti-spam/anti-bot measures, if enabled),
- To improve the Website (e.g., website analytics), where enabled and permitted,
- to enable third-party features (e.g., embedded videos), where enabled/allowed by your choices.
5. Legal bases for processing (GDPR Art. 6)
We process personal data on the following legal bases, depending on the context:
Consent (Art. 6(1)(a)) – e.g., newsletter subscription; optional cookies; and third-party embeds where consent is required.
Legitimate interests (Art. 6(1)(f)) – in particular:
- to handle and respond to inquiries sent via the contact form or email and to communicate with you (our legitimate interest is customer support and correspondence management),
- to operate, secure, and maintain the Website, including preventing abuse and troubleshooting (our legitimate interest is keeping the Website reliable and secure),
- to maintain server/security logs and protect the Website against attacks (our legitimate interest is cybersecurity and incident prevention),
- to establish, exercise, or defend legal claims (our legitimate interest is protecting our rights).
You may withdraw your consent at any time (see Section 10). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Who do we share your data with (recipients)?
We may share personal data with trusted providers only as needed to run the Website and provide features, such as:
- hosting and IT maintenance providers,
- email/newsletter delivery providers (if used),
- security and anti-abuse providers (e.g., anti-spam/anti-bot tools),
- providers of embedded content (e.g., embedded video players), only if such content is enabled/loaded.
We may also disclose data if required by law or to protect our rights.
7. International data transfers (if applicable)
Third-party features (such as embedded media) may be loaded only after you accept optional cookies, according to your cookie consent choices. When such features (or anti-bot measures, if enabled) are loaded, external providers may receive technical data (e.g., IP address and identifiers) and may process it outside the European Economic Area (EEA). We do not control these providers’ processing. Where transfers outside the EEA occur, they are carried out by the relevant providers using lawful transfer mechanisms under the GDPR, as described in their documentation.
8. How long do we keep data (retention)?
We keep personal data only as long as necessary for the purposes described above:
- Contact messages: typically up to 12–24 months, unless longer retention is needed to resolve a matter or defend legal claims.
- Newsletter: until you unsubscribe/withdraw consent; we may keep a minimal suppression record to ensure we respect your opt-out (e.g., up to 24 months).
- Server/security logs: typically 30–180 days, unless needed longer for security investigations or legal claims.
9. Cookies and similar technologies
We use cookies and similar technologies. Some are strictly necessary for the Website to function; others are optional and used only if you consent.
Embedded videos on the Website are loaded only after you accept optional cookies. When embedded content or anti-abuse mechanisms are loaded, external providers may set their own cookies/identifiers.
For details, please see our Cookies Policy and the auto-generated cookie list/appendix available on the Website.
10. Your rights
Under the GDPR, you may have the right to:
- access your personal data,
- rectify inaccurate data,
- request deletion,
- restrict processing,
- object to processing based on legitimate interests,
- data portability (where applicable),
- withdraw consent at any time (this does not affect processing done before withdrawal),
- lodge a complaint with your supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).
To exercise your rights, contact us at endofthesungame@gmail.com.
11. Newsletter opt-out
You can unsubscribe at any time using the unsubscribe link in each newsletter email or by contacting us at endofthesungame@gmail.com.
12. External websites and third-party services
The Website may link to external websites (e.g., stores/platforms) or include third-party content (e.g., embedded videos). We are not responsible for the content or privacy practices of third parties. Please review their policies separately.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time by publishing a new version on the Website. The “Last updated” date at the top indicates the most recent version.